I am troubleshooting a problem where a long TCP transaction (>=60s) would disconnect between my source (Point A) and destination (Point B), whilst passing through an internal Linux Gateway and several other CISCO routers/switches in between.
To investigate the issue further, I would need to enable TCP logging and facilitate my root cause analysis. However, I have very low disk space available and could not perform this logging for as long as I would like to. Therefore, I would like to know if there's a way to enable TCP logging for only selected TCP packets? I would need to enable logging at both the Gateway and the intermediate network devices in between.
Specifically, I am investigating whether Point A has received a FIN packet from Point B or from any other devices in between, which resulted in the abovementioned disconnect when a transaction takes more than 60s to complete.